/*
* ngIRCd -- The Next Generation IRC Daemon
- * Copyright (c)2001-2005 by Alexander Barton (alex@barton.de)
+ * Copyright (c)2001-2006 Alexander Barton (alex@barton.de).
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
#include "portab.h"
-static char UNUSED id[] = "$Id: ngircd.c,v 1.96 2005/06/01 21:52:18 alex Exp $";
+static char UNUSED id[] = "$Id: ngircd.c,v 1.114 2006/12/07 17:57:20 fw Exp $";
/**
* @file
#include "parse.h"
#include "irc.h"
-#ifdef RENDEZVOUS
+#ifdef ZEROCONF
#include "rendezvous.h"
#endif
#include "ngircd.h"
-LOCAL void Initialize_Signal_Handler PARAMS(( void ));
-LOCAL void Signal_Handler PARAMS(( int Signal ));
+static void Initialize_Signal_Handler PARAMS(( void ));
+static void Signal_Handler PARAMS(( int Signal ));
-LOCAL void Show_Version PARAMS(( void ));
-LOCAL void Show_Help PARAMS(( void ));
+static void Show_Version PARAMS(( void ));
+static void Show_Help PARAMS(( void ));
-LOCAL void Pidfile_Create PARAMS(( long ));
-LOCAL void Pidfile_Delete PARAMS(( void ));
+static void Pidfile_Create PARAMS(( pid_t pid ));
+static void Pidfile_Delete PARAMS(( void ));
-LOCAL void Fill_Version PARAMS(( void ));
+static void Fill_Version PARAMS(( void ));
-LOCAL void Setup_FDStreams PARAMS(( void ));
+static void Setup_FDStreams PARAMS(( void ));
+static bool NGIRCd_Init PARAMS(( bool ));
/**
* The main() function of ngIRCd.
GLOBAL int
main( int argc, const char *argv[] )
{
- struct passwd *pwd;
- struct group *grp;
bool ok, configtest = false;
- long pid;
+ bool NGIRCd_NoDaemon = false;
int i;
size_t n;
umask( 0077 );
NGIRCd_SignalQuit = NGIRCd_SignalRestart = NGIRCd_SignalRehash = false;
- NGIRCd_NoDaemon = NGIRCd_Passive = false;
+ NGIRCd_Passive = false;
#ifdef DEBUG
NGIRCd_Debug = false;
#endif
NGIRCd_SignalQuit = false;
/* Initialize modules, part I */
- Log_Init( );
+ Log_Init( ! NGIRCd_NoDaemon );
Conf_Init( );
- if( Conf_Chroot[0] )
- {
- /* Chroot */
- if( chdir( Conf_Chroot ) != 0 ) Log( LOG_ERR, "Can't chdir() in ChrootDir (%s): %s", Conf_Chroot, strerror( errno ));
-
- if( chroot( Conf_Chroot ) != 0 ) Log( LOG_ERR, "Can't change root directory to \"%s\": %s", Conf_Chroot, strerror( errno ));
- else Log( LOG_INFO, "Changed root and working directory to \"%s\".", Conf_Chroot );
- }
-
- if( Conf_GID != 0 )
- {
- /* Set new group ID */
- if( setgid( Conf_GID ) != 0 ) Log( LOG_ERR, "Can't change group ID to %u: %s", Conf_GID, strerror( errno ));
- }
- if( Conf_UID != 0 )
- {
- /* Set new user ID */
- if( setuid( Conf_UID ) != 0 ) Log( LOG_ERR, "Can't change user ID to %u: %s", Conf_UID, strerror( errno ));
- }
-
- /* Normally a child process is forked which isn't any longer
- * connected to ther controlling terminal. Use "--nodaemon"
- * to disable this "daemon mode" (useful for debugging). */
- if( ! NGIRCd_NoDaemon )
- {
- /* fork child process */
- pid = (long)fork( );
- if( pid > 0 )
- {
- /* "Old" process: exit. */
- exit( 0 );
- }
- if( pid < 0 )
- {
- /* Error!? */
- fprintf( stderr, "%s: Can't fork: %s!\nFatal error, exiting now ...\n", PACKAGE_NAME, strerror( errno ));
- exit( 1 );
- }
-
- /* New child process */
- (void)setsid( );
- chdir( "/" );
-
- /* Detach stdin, stdout and stderr */
- Setup_FDStreams( );
- }
-
- /* Create PID file */
- pid = (long) getpid( );
- Pidfile_Create( pid );
-
- /* Show user, group, and PID of the running daemon */
- pwd = getpwuid( getuid( )); grp = getgrgid( getgid( ));
- Log( LOG_INFO, "Running as user %s(%ld), group %s(%ld), with PID %ld.", pwd ? pwd->pw_name : "unknown", (long)getuid( ), grp ? grp->gr_name : "unknown", (long)getgid( ), pid);
-
- /* Change working directory to home directory of the user
- * we are running as (when not running chroot()'ed!) */
- if( Conf_UID != 0 && ! Conf_Chroot[0] )
- {
- struct passwd *pwd;
-
- pwd = getpwuid( Conf_UID );
- if( pwd != NULL )
- {
- if( chdir( pwd->pw_dir ) == 0 ) Log( LOG_DEBUG, "Changed working directory to \"%s\" ...", pwd->pw_dir );
- else Log( LOG_ERR, "Can't change working directory to \"%s\": %s", pwd->pw_dir, strerror( errno ));
- }
- else Log( LOG_ERR, "Can't get user informaton for UID %d!?", Conf_UID );
+ /* Initialize the "main program": chroot environment, user and
+ * group ID, ... */
+ if (!NGIRCd_Init(NGIRCd_NoDaemon)) {
+ Log(LOG_ALERT, "Fatal: Initialization failed");
+ exit(1);
}
/* Initialize modules, part II: these functions are eventually
* called with already dropped privileges ... */
- Resolve_Init( );
- Lists_Init( );
Channel_Init( );
Client_Init( );
-#ifdef RENDEZVOUS
+#ifdef ZEROCONF
Rendezvous_Init( );
#endif
Conn_Init( );
* beim PASS-Befehl verwendete Syntax sowie die erweiterten Flags
* sind in doc/Protocol.txt beschrieben. */
#ifdef IRCPLUS
- sprintf( NGIRCd_ProtoID, "%s%s %s|%s:%s", PROTOVER, PROTOIRCPLUS, PACKAGE_NAME, PACKAGE_VERSION, IRCPLUSFLAGS );
+ snprintf( NGIRCd_ProtoID, sizeof NGIRCd_ProtoID, "%s%s %s|%s:%s", PROTOVER, PROTOIRCPLUS, PACKAGE_NAME, PACKAGE_VERSION, IRCPLUSFLAGS );
#ifdef ZLIB
strcat( NGIRCd_ProtoID, "Z" );
#endif
if( Conf_OperCanMode ) strcat( NGIRCd_ProtoID, "o" );
#else
- sprintf( NGIRCd_ProtoID, "%s%s %s|%s", PROTOVER, PROTOIRC, PACKAGE_NAME, PACKAGE_VERSION );
+ snprintf( NGIRCd_ProtoID, sizeof NGIRCd_ProtoID, "%s%s %s|%s", PROTOVER, PROTOIRC, PACKAGE_NAME, PACKAGE_VERSION );
#endif
- strcat( NGIRCd_ProtoID, " P" );
+ strlcat( NGIRCd_ProtoID, " P", sizeof NGIRCd_ProtoID );
#ifdef ZLIB
- strcat( NGIRCd_ProtoID, "Z" );
+ strlcat( NGIRCd_ProtoID, "Z", sizeof NGIRCd_ProtoID );
#endif
Log( LOG_DEBUG, "Protocol and server ID is \"%s\".", NGIRCd_ProtoID );
/* Alles abmelden */
Conn_Exit( );
-#ifdef RENDEZVOUS
+#ifdef ZEROCONF
Rendezvous_Exit( );
#endif
Client_Exit( );
Channel_Exit( );
- Lists_Exit( );
Log_Exit( );
-
- Pidfile_Delete( );
}
+ Pidfile_Delete( );
return 0;
} /* main */
* further usage, for example by the IRC command VERSION and the --version
* command line switch.
*/
-LOCAL void
+static void
Fill_Version( void )
{
NGIRCd_VersionAddition[0] = '\0';
#ifdef SYSLOG
- strcpy( NGIRCd_VersionAddition, "SYSLOG" );
+ strlcpy( NGIRCd_VersionAddition, "SYSLOG", sizeof NGIRCd_VersionAddition );
#endif
#ifdef ZLIB
- if( NGIRCd_VersionAddition[0] ) strcat( NGIRCd_VersionAddition, "+" );
- strcat( NGIRCd_VersionAddition, "ZLIB" );
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "+", sizeof NGIRCd_VersionAddition );
+
+ strlcat( NGIRCd_VersionAddition, "ZLIB", sizeof NGIRCd_VersionAddition );
#endif
#ifdef TCPWRAP
- if( NGIRCd_VersionAddition[0] ) strcat( NGIRCd_VersionAddition, "+" );
- strcat( NGIRCd_VersionAddition, "TCPWRAP" );
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "+", sizeof NGIRCd_VersionAddition );
+
+ strlcat( NGIRCd_VersionAddition, "TCPWRAP", sizeof NGIRCd_VersionAddition );
#endif
-#ifdef RENDEZVOUS
- if( NGIRCd_VersionAddition[0] ) strcat( NGIRCd_VersionAddition, "+" );
- strcat( NGIRCd_VersionAddition, "RENDEZVOUS" );
+#ifdef ZEROCONF
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "+", sizeof NGIRCd_VersionAddition );
+
+ strlcat( NGIRCd_VersionAddition, "ZEROCONF", sizeof NGIRCd_VersionAddition );
#endif
#ifdef IDENTAUTH
- if( NGIRCd_VersionAddition[0] ) strcat( NGIRCd_VersionAddition, "+" );
- strcat( NGIRCd_VersionAddition, "IDENT" );
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "+", sizeof NGIRCd_VersionAddition );
+
+ strlcat( NGIRCd_VersionAddition, "IDENT", sizeof NGIRCd_VersionAddition );
#endif
#ifdef DEBUG
- if( NGIRCd_VersionAddition[0] ) strcat( NGIRCd_VersionAddition, "+" );
- strcat( NGIRCd_VersionAddition, "DEBUG" );
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "+", sizeof NGIRCd_VersionAddition );
+
+ strlcat( NGIRCd_VersionAddition, "DEBUG", sizeof NGIRCd_VersionAddition );
#endif
#ifdef SNIFFER
- if( NGIRCd_VersionAddition[0] ) strcat( NGIRCd_VersionAddition, "+" );
- strcat( NGIRCd_VersionAddition, "SNIFFER" );
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "+", sizeof NGIRCd_VersionAddition );
+
+ strlcat( NGIRCd_VersionAddition, "SNIFFER", sizeof NGIRCd_VersionAddition );
#endif
#ifdef STRICT_RFC
- if( NGIRCd_VersionAddition[0] ) strcat( NGIRCd_VersionAddition, "+" );
- strcat( NGIRCd_VersionAddition, "RFC" );
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "+", sizeof NGIRCd_VersionAddition );
+
+ strlcat( NGIRCd_VersionAddition, "RFC", sizeof NGIRCd_VersionAddition );
#endif
#ifdef IRCPLUS
- if( NGIRCd_VersionAddition[0] ) strcat( NGIRCd_VersionAddition, "+" );
- strcat( NGIRCd_VersionAddition, "IRCPLUS" );
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "+", sizeof NGIRCd_VersionAddition );
+
+ strlcat( NGIRCd_VersionAddition, "IRCPLUS", sizeof NGIRCd_VersionAddition );
#endif
- if( NGIRCd_VersionAddition[0] ) strlcat( NGIRCd_VersionAddition, "-", sizeof( NGIRCd_VersionAddition ));
+ if( NGIRCd_VersionAddition[0] )
+ strlcat( NGIRCd_VersionAddition, "-", sizeof( NGIRCd_VersionAddition ));
+
strlcat( NGIRCd_VersionAddition, TARGET_CPU, sizeof( NGIRCd_VersionAddition ));
strlcat( NGIRCd_VersionAddition, "/", sizeof( NGIRCd_VersionAddition ));
strlcat( NGIRCd_VersionAddition, TARGET_VENDOR, sizeof( NGIRCd_VersionAddition ));
Conn_ExitListeners( );
/* Remember old server name */
- strcpy( old_name, Conf_ServerName );
+ strlcpy( old_name, Conf_ServerName, sizeof old_name );
/* Re-read configuration ... */
Conf_Rehash( );
/* Recover old server name: it can't be changed during run-time */
if( strcmp( old_name, Conf_ServerName ) != 0 )
{
- strcpy( Conf_ServerName, old_name );
+ strlcpy( Conf_ServerName, old_name, sizeof Conf_ServerName );
Log( LOG_ERR, "Can't change \"ServerName\" on runtime! Ignored new name." );
}
/**
* Initialize the signal handler.
*/
-LOCAL void
+static void
Initialize_Signal_Handler( void )
{
/* Signal-Handler initialisieren: einige Signale
#endif
/* Signal-Handler einhaengen */
- sigaction( SIGINT, &saction, NULL );
- sigaction( SIGQUIT, &saction, NULL );
- sigaction( SIGTERM, &saction, NULL);
- sigaction( SIGHUP, &saction, NULL);
- sigaction( SIGCHLD, &saction, NULL);
+ sigaction(SIGINT, &saction, NULL);
+ sigaction(SIGQUIT, &saction, NULL);
+ sigaction(SIGTERM, &saction, NULL);
+ sigaction(SIGHUP, &saction, NULL);
+ sigaction(SIGCHLD, &saction, NULL);
/* einige Signale ignorieren */
saction.sa_handler = SIG_IGN;
- sigaction( SIGPIPE, &saction, NULL );
+ sigaction(SIGPIPE, &saction, NULL);
#else
/* kein sigaction() vorhanden */
/* Signal-Handler einhaengen */
- signal( SIGINT, Signal_Handler );
- signal( SIGQUIT, Signal_Handler );
- signal( SIGTERM, Signal_Handler );
- signal( SIGHUP, Signal_Handler );
- signal( SIGCHLD, Signal_Handler );
+ signal(SIGINT, Signal_Handler);
+ signal(SIGQUIT, Signal_Handler);
+ signal(SIGTERM, Signal_Handler);
+ signal(SIGHUP, Signal_Handler);
+ signal(SIGCHLD, Signal_Handler);
/* einige Signale ignorieren */
- signal( SIGPIPE, SIG_IGN );
+ signal(SIGPIPE, SIG_IGN);
#endif
} /* Initialize_Signal_Handler */
* user and/or the system to it. For example SIGTERM and SIGHUP.
* @param Signal Number of the signal to handle.
*/
-LOCAL void
+static void
Signal_Handler( int Signal )
{
switch( Signal )
/**
* Display copyright and version information of ngIRCd on the console.
*/
-LOCAL void
+static void
Show_Version( void )
{
puts( NGIRCd_Version );
- puts( "Copyright (c)2001-2005 by Alexander Barton (<alex@barton.de>)." );
- puts( "Homepage: <http://arthur.ath.cx/~alex/ngircd/>\n" );
+ puts( "Copyright (c)2001-2006 Alexander Barton (<alex@barton.de>) and Contributors." );
+ puts( "Homepage: <http://ngircd.barton.de/>\n" );
puts( "This is free software; see the source for copying conditions. There is NO" );
puts( "warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE." );
} /* Show_Version */
* This help depends on the configuration of the executable and only shows
* options that are actually enabled.
*/
-LOCAL void
+static void
Show_Help( void )
{
#ifdef DEBUG
/**
* Delete the file containing the process ID (PID).
*/
-LOCAL void
+static void
Pidfile_Delete( void )
{
/* Pidfile configured? */
* Create the file containing the process ID of ngIRCd ("PID file").
* @param pid The process ID to be stored in this file.
*/
-LOCAL void
-Pidfile_Create( long pid )
+static void
+Pidfile_Create(pid_t pid)
{
- FILE *pidf;
+ int pidfd;
+ char pidbuf[64];
+ int len;
/* Pidfile configured? */
if( ! Conf_PidFile[0] ) return;
Log( LOG_DEBUG, "Creating PID file (%s) ...", Conf_PidFile );
#endif
- pidf = fopen( Conf_PidFile, "w" );
-
- if( ! pidf )
- {
+ pidfd = open( Conf_PidFile, O_RDWR|O_CREAT|O_EXCL, S_IRUSR|S_IWUSR|S_IRGRP|S_IROTH);
+ if ( pidfd < 0 ) {
Log( LOG_ERR, "Error writing PID file (%s): %s", Conf_PidFile, strerror( errno ));
return;
}
- if( fprintf( pidf, "%ld\n", pid ) < 0 )
+ len = snprintf(pidbuf, sizeof pidbuf, "%ld\n", (long)pid);
+ if (len < 0 || len >= (int)sizeof pidbuf) {
+ Log( LOG_ERR, "Error converting pid");
+ return;
+ }
+
+ if (write(pidfd, pidbuf, (size_t)len) != (ssize_t)len)
Log( LOG_ERR, "Can't write PID file (%s): %s", Conf_PidFile, strerror( errno ));
- if( fclose(pidf) != 0 )
+ if( close(pidfd) != 0 )
Log( LOG_ERR, "Error closing PID file (%s): %s", Conf_PidFile, strerror( errno ));
} /* Pidfile_Create */
/**
* Redirect stdin, stdout and stderr to apropriate file handles.
*/
-LOCAL void
+static void
Setup_FDStreams( void )
{
int fd;
* we are most probably chrooted already and the server has been
* restarted. So we simply don't try to redirect stdXXX ... */
fd = open( "/dev/null", O_RDWR );
- if ( fd < 0 ) return;
+ if ( fd < 0 ) {
+ Log(LOG_WARNING, "Could not open /dev/null: %s", strerror(errno));
+ return;
+ }
- /* Close "old" stdin/out/err descriptors */
- close( 0 ); close( 1 ); close( 2 );
+ fflush(stdout);
+ fflush(stderr);
/* Create new stdin(0), stdout(1) and stderr(2) descriptors */
dup2( fd, 0 ); dup2( fd, 1 ); dup2( fd, 2 );
} /* Setup_FDStreams */
+static bool
+NGIRCd_getNobodyID(uid_t *uid, gid_t *gid )
+{
+ struct passwd *pwd;
+
+ pwd = getpwnam("nobody");
+ if (!pwd) return false;
+
+ if ( !pwd->pw_uid || !pwd->pw_gid)
+ return false;
+
+ *uid = pwd->pw_uid;
+ *gid = pwd->pw_gid;
+ endpwent();
+
+ return true;
+}
+
+
+static bool
+NGIRCd_Init( bool NGIRCd_NoDaemon )
+{
+ static bool initialized;
+ bool chrooted = false;
+ struct passwd *pwd;
+ struct group *grp;
+ int real_errno;
+ pid_t pid;
+
+ if (initialized)
+ return true;
+
+ if( Conf_Chroot[0] ) {
+ if( chdir( Conf_Chroot ) != 0 ) {
+ Log( LOG_ERR, "Can't chdir() in ChrootDir (%s): %s", Conf_Chroot, strerror( errno ));
+ return false;
+ }
+
+ if( chroot( Conf_Chroot ) != 0 ) {
+ if (errno != EPERM) {
+ Log( LOG_ERR, "Can't change root directory to \"%s\": %s",
+ Conf_Chroot, strerror( errno ));
+
+ return false;
+ }
+ } else {
+ chrooted = true;
+ Log( LOG_INFO, "Changed root and working directory to \"%s\".", Conf_Chroot );
+ }
+ }
+
+ if (Conf_UID == 0) {
+ Log(LOG_INFO, "ServerUID must not be 0, using \"nobody\" instead.", Conf_UID);
+
+ if (! NGIRCd_getNobodyID(&Conf_UID, &Conf_GID)) {
+ Log(LOG_WARNING, "Could not get user/group ID of user \"nobody\": %s",
+ errno ? strerror(errno) : "not found" );
+ return false;
+ }
+ }
+
+ if (getgid() != Conf_GID) {
+ /* Change group ID */
+ if (setgid(Conf_GID) != 0) {
+ real_errno = errno;
+ Log( LOG_ERR, "Can't change group ID to %u: %s", Conf_GID, strerror( errno ));
+ if (real_errno != EPERM)
+ return false;
+ }
+ }
+
+ if (getuid() != Conf_UID) {
+ /* Change user ID */
+ if (setuid(Conf_UID) != 0) {
+ real_errno = errno;
+ Log(LOG_ERR, "Can't change user ID to %u: %s", Conf_UID, strerror(errno));
+ if (real_errno != EPERM)
+ return false;
+ }
+ }
+
+ initialized = true;
+
+ /* Normally a child process is forked which isn't any longer
+ * connected to ther controlling terminal. Use "--nodaemon"
+ * to disable this "daemon mode" (useful for debugging). */
+ if ( ! NGIRCd_NoDaemon ) {
+ pid = fork( );
+ if( pid > 0 ) {
+ /* "Old" process: exit. */
+ exit( 0 );
+ }
+ if( pid < 0 ) {
+ /* Error!? */
+ fprintf( stderr, "%s: Can't fork: %s!\nFatal error, exiting now ...\n",
+ PACKAGE_NAME, strerror( errno ));
+ exit( 1 );
+ }
+
+ /* New child process */
+ (void)setsid( );
+ chdir( "/" );
+
+ /* Detach stdin, stdout and stderr */
+ Setup_FDStreams( );
+ }
+ pid = getpid();
+
+ Pidfile_Create( pid );
+
+ /* Check UID/GID we are running as, can be different from values
+ * configured (e. g. if we were already started with a UID>0. */
+ Conf_UID = getuid();
+ Conf_GID = getgid();
+
+ pwd = getpwuid( Conf_UID );
+ grp = getgrgid( Conf_GID );
+
+ Log( LOG_INFO, "Running as user %s(%ld), group %s(%ld), with PID %ld.",
+ pwd ? pwd->pw_name : "unknown", Conf_UID,
+ grp ? grp->gr_name : "unknown", Conf_GID, pid);
+
+ if ( chrooted ) {
+ Log( LOG_INFO, "Running chrooted, chrootdir \"%s\".", Conf_Chroot );
+ return true;
+ } else {
+ Log( LOG_INFO, "Not running chrooted." );
+ }
+
+ /* Change working directory to home directory of the user
+ * we are running as (only when running in daemon mode and not in chroot) */
+
+ if ( pwd ) {
+ if (!NGIRCd_NoDaemon ) {
+ if( chdir( pwd->pw_dir ) == 0 )
+ Log( LOG_DEBUG, "Changed working directory to \"%s\" ...", pwd->pw_dir );
+ else
+ Log( LOG_ERR, "Can't change working directory to \"%s\": %s",
+ pwd->pw_dir, strerror( errno ));
+ }
+ } else {
+ Log( LOG_ERR, "Can't get user informaton for UID %d!?", Conf_UID );
+ }
+
+return true;
+}
+
/* -eof- */